
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json)
Hash identifier: 2av430At1vz2TbrSxQqzQq4Uxh3kNW3NIIMz5gpS/nU=
Subject key identifier: 20:4E:DA:82:79:DE:4F:DF:21:68:88:37:CB:5A:E6:D1:4C:FF:10:F3
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
Manifest number: 061E
Signing time: Sat 28 Feb 2026 23:31:15 +0000
Manifest this update: Sat 28 Feb 2026 23:31:14 +0000
Manifest next update: Sat 07 Mar 2026 23:31:14 +0000
Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: 7woAii8VzASgWPDk1GZUjZvIEHDvhMB/80DXNNn+r/M=)
2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: yrBckeH/+fkOwhmt8yJuTEshgMYvmsvIaKrpWTpXUtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Feb 28 23:31:14 2026 GMT
Not After : Mar 7 23:31:14 2026 GMT
Subject: CN=69a37ac3-f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:e2:25:23:35:9c:6e:a8:7e:93:e6:26:e8:
64:0f:8f:ef:67:ea:ec:fa:a1:bd:d2:71:71:c0:97:
60:81:ef:d2:23:d1:be:f3:e0:7c:5a:6c:88:24:99:
c6:2a:01:b7:6a:c7:ad:b4:f4:cf:a7:a5:ef:72:24:
6c:1a:24:a8:39:50:d7:a2:c3:67:7c:9e:78:da:ae:
98:bd:61:2a:3c:a6:09:46:69:8c:30:ff:84:2d:fa:
5f:b4:93:6d:24:6f:a0:21:8d:d4:48:83:29:5e:fd:
02:85:a3:3c:f0:25:33:02:77:67:b9:88:3b:fb:ac:
87:da:11:63:f1:c9:7d:48:d2:5e:96:ec:d5:40:9d:
ed:3c:9c:c8:57:82:ee:8b:12:9c:03:7a:46:9a:8a:
7c:3e:4b:c8:cf:3e:44:9d:93:02:52:25:74:b4:ee:
65:2c:a5:c2:c0:99:92:48:47:e2:b5:c2:85:f5:41:
bc:70:28:75:fb:03:ba:e2:fe:69:20:de:57:b2:f4:
94:f4:ec:cb:cc:8f:7f:db:43:6b:4b:de:75:ad:ed:
ff:c8:a4:3c:ac:1e:e3:39:da:56:a3:92:ec:90:07:
7a:69:40:20:ef:e1:85:2b:d1:e9:fb:7a:4d:81:94:
9e:bc:60:ca:a3:52:6a:d5:1d:81:36:b2:7b:1e:c1:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:DA:82:79:DE:4F:DF:21:68:88:37:CB:5A:E6:D1:4C:FF:10:F3
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:60:fd:81:f7:bc:8f:c0:71:7c:81:eb:44:cf:a4:b5:b9:09:
6b:3a:b5:b0:c1:8a:e4:89:3a:d3:41:3b:e3:bf:f4:05:15:81:
67:3d:82:0e:5e:fe:74:0c:44:88:32:f5:37:50:e2:b2:9d:f7:
7a:87:54:a5:bc:bf:bf:64:3e:5d:36:ab:19:a2:b4:f4:9b:cb:
bb:19:5c:4d:c3:7d:b4:1b:dd:34:82:d2:40:6a:c2:3f:bb:e5:
81:de:df:6e:bf:29:77:c3:ca:9a:95:43:b3:b0:86:51:e7:d6:
10:f2:07:3e:1a:e8:69:82:cc:ae:87:88:d8:a2:0d:59:c1:1f:
5b:b1:ed:d6:3c:61:cf:80:93:ab:0f:84:0a:23:e4:ab:0b:22:
b9:9e:b6:ad:e2:98:1b:03:a6:7c:b1:78:aa:61:60:29:27:56:
8d:47:c6:18:23:53:c3:69:04:6d:30:d5:a0:bf:bc:0c:21:69:
0e:d5:d4:71:39:c3:4c:6a:6c:04:2d:29:c3:63:19:9e:13:54:
e5:91:c5:58:a6:bd:40:dc:b6:7d:3f:d3:a2:22:15:c5:37:af:
8e:b0:3d:2d:59:82:18:00:71:df:c4:ee:22:26:0e:fe:32:91:
fc:f2:30:2a:38:41:a9:44:f8:be:0e:76:e3:6a:ec:83:8a:39:
76:99:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:39 2026 by rpki-client